Description 



EMBEDDED MEMORY WITH SECURITY 
ROW LOCK PROTECTION 

/, 

Technical Field 

The present invention relates to semiconductor 
memory devices and more specifically to a semiconductor 
memory having a security feature to prevent unauthorized 
access to the contents of the memory. 

Background Art 

Semiconductor memory devices, such as non- 
volatile memories and the like, usually include embedded 
15 memories, such as the code memory in flash 

microcontrollers, which may contain proprietary programs 
that should not be accessible to anyone, especially one's 
competitors. These embedded memories require security 
features that allow users to program the contents of the 
20 memory, verify the contents of the memory, and then 

disable the memory from ever being read externally again. 

Some prior art methods of protecting the 
contents of embedded memories include the use of lockbit 
features that prevent the embedded memory (hereinafter 
25 "memory") from being read outside of a device in which it 
is embedded after locking. The lockbit is a type of 
programmable, non-volatile memory element that, when 
programmed or "fused," prevents external READ operations 
of the memory. Since a non-volatile element is used, it 
30 can be written and then erased again, corresponding to 

locking and unlocking of the memory. It is desirable to 
have a lock/unlock capability in the memory security 
features in order to increase manufacturing testability 
and yield, and to allow reuse and reprogramming by an 
35 end-user. Currently, a common method to unlock the 
device would usually involve the use of a CHIPERASE 
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command, which first erases any proprietary memory 
contents and then erases the lockbit fuses. In this way, 
the user may only reach the memory content space after 
the previous memory contents have been completely erased. 
5 However, it has been found that this method is prone to 
attack and defeat by hackers for a variety of reasons. 

U.S. Patent No. 6,229,731 to Kasai et al., U.S. 
Patent No. 6,088,262 to Nasu, and U.S. Patent No. 
6,026,016 to Gufken disclose semiconductor devices having 

10 read protect circuits for protecting non-volatile memory 
arrays. However, in each one of these prior art 
semiconductor arrays, a read protection circuit is 
located outside of the main memory array. This does not 
allow the erase/unlock behavior of the lockbits, or 

15 protection circuit, to match the erase behavior of the 
memory array, which may allow access to the memory 
content space if the lockbits are unlocked before the 
memory contents are erased. 

It is an object of the present invention to 

20 provide a semiconductor memory having a memory protection 
architecture and algorithm that prevents the defeat of 
the lockbits and guarantees that the memory contents 
cannot be read even when the lockbits are defeated. 

It is a further object of the present invention 

25 to provide a memory protection architecture that is part 
of the memory array so that the erasing behavior is 
matched. 

Summary of the Invention 

30 The above objects have been achieved by a 

semiconductor memory device having a memory array 
constructed with the addition of one or more security 
rows within the memory array. The security row is 
comprised of non-volatile memory elements similar or 

35 identical to the non-volatile memory elements in the rest 
of the memory array. Each element in the security row is 
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connected to the bit line columns ("bit lines") of the 
memory array just like every other memory element in the 
array. In addition, there are extra memory elements 
("lockbit cells," or "lockbits") in the security row that 
5 do not connect to the bit lines of the memory array, but 
connect to additional security bit line columns 
("security bit lines") . 

In one exemplary embodiment, the elements in 
the security row can be programmed to an unlocked state 

10 in which the elements do not conduct current when the 

security row is selected, and therefore have no effect on 
the bit lines or security bit lines, and consequently, no 
effect on the ability to read the contents of the 
internal embedded memory elements. Alternatively, the 

15 security row elements can be programmed to a locked state 
in which the security row elements conduct current 
anytime that the security row is selected. For the 
security row elements connected to bit lines, selecting 
the security row causes all I/O sense-amplifier ("sense- 

20 amp") outputs to always detect and output a logic zero 

("0") value, regardless of the true memory contents of a 
concurrently selected memory array row. For the security 
row elements connected to the security bit lines, 
selecting a security row causes a lockbit sense amplifier 

25 ("lockbit sense-amp") to always detect and output a logic 
zero ("0") value, which corresponds to a lockbit LOCK 
condition. Logic circuits cause the security row to be 
selected for external memory read requests. Selection of 
the security row in parallel with the requested memory 

30 row ensures that, while in locked mode, external memory 
access will return invalid zero-data. 

Logic circuits cause the security row to be 
deselected for internal read requests. De-selection of 
the security row ensures that internal memory accesses 

35 will return valid non-zero data, so that other circuits 
on the microcontroller can use the data. In addition to 
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selecting the security row in response to memory access 
requests, logic circuits also cause the security row to 
be selected at other appropriate times so that the 
outputs of the lockbit sense-amps can be sampled and 
5 latched. The outputs of the lockbit sense-amps determine 
whether the lockbit cell is written or erased, 
corresponding to a LOCK or UNLOCK condition. The status 
of the lockbit cell is then used to enable or disable 
external memory read and write requests altogether. By 

10 disabling all external memory read and write requests due 
to a LOCK status, an even higher level of embedded memory 
security is achieved. 

Incorporating security rows with bit line 
elements, security bit line elements, or a combination of 

15 the two, increases the overall level of embedded memory 
security, and reduces the ability of hackers to gain 
access to the embedded memory data contents. 

To unlock and reuse a locked device, the 
security row can be erased back to the unlock state by a 

20 CHIPERASE command in a single or multiple chip erase 

programming mode. The CHIPERASE command erases and/or 
destroys the embedded memory data contents. Because the 
memory elements, logic, and programming circuits are 
similar or identical for both the security row and the 

25 other memory elements in the memory array, and because 

the security row is located among the other memory array 
elements, the security row is guaranteed to be erased in 
the same manner and at the same time as the other 
embedded memory elements during the chip erase cycle. To 

30 further guarantee that the memory array is erased before 
the security row elements are erased, the CHIPERASE 
command is executed in two or more steps. For example, 
the first step consists of erasing all memory elements in 
the array except those memory elements in the security 

35 row. Subsequent steps erase all the memory elements in 
the array, including some or all memory elements in the 
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security row. This subsequent step ensures that the 
security row will be erased and unlocked only after the 
secured contents of the embedded memory elements have 
previously been erased and destroyed- Conversely, the 
5 embedded memory element contents can be accessed only 

after the security row memory elements have been erased, 
which is at a time after the embedded memory contents 
have been erased. A situation will not occur where the 
security row memory elements have been erased/unlocked, 
10 yet the original embedded memory contents have not been 
erased but are intact and readable. Regardless of the 
hacking technique used, the memory contents will be 
secure from read until both the memory array elements and 
security row have been erased. 

15 

Brief Description of the Drawings 

FIG. 1 is a circuit block diagram showing an 
embodiment of the semiconductor memory array structure of 
the present invention. 

20 

Best Modes for Carrying Out the Invention 

With reference to FIG. 1, a semiconductor 
memory incorporating an exemplary embodiment of the 
present invention is shown. The semiconductor memory 

25 element shown in FIG. 1 is an electrically erasable and 
programmable non-volatile memory cell (EEPROM) , but the 
invention can be implemented by one of ordinary skill 
into other types of non-volatile memory cells, such as, 
for example, a flash memory cell. In the EEPROM array of 

30 FIG. 1, each floating gate transistor 10 is paired up 

with an access transistor 12, forming a memory cell 19, 
in which the source of the access transistor 12 is 
connected to the drain of the floating gate transistor 
10. Each of the memory cells are arranged into a memory 

35 array structure, with the various bit lines 16 and word 
lines 20 arranged in an array as shown in FIG. 1. The 
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drain of the access transistor 12 taps into a bit line 16 
that is common to the drains of all of the access 
transistors 12 in the same column 66. A bit line column 
latch 24 is connected to one end of the bit line 16 and a 
5 bit line select transistor 28 is connected to the other 
end. The gate of the access transistor 12 is connected 
to a word line 20 that is common to the gates of all of 
the access transistors in the same row. 

A row decoder 50 is connected to each of the 

10 word lines 20 of the memory array and selects the 

appropriate word line of the memory cell 19 that is to be 
written, erased, or read. The floating gate transistors 
10 in each row are typically subdivided into page, word, 
or byte size groups and the gates of the floating gate 

15 transistors 10 in each group are connected to the source 
of a word select transistor 14. The gate of the word 
select transistor 14 is connected to the word line 20. 
The drain of the word select transistor 14 connects to a 
V ref line 18 that provides a stable reference voltage to 

20 the memory cell during read, or V pp during erase, or V ss 

during write. One end of the V ref line 18 is connected to 
a V ref column latch 26 and the other end is connected to a 
transistor 30 that is controlled by a column address ' 
decoder 44. The bit line select transistor 28 serves to 

25 receive instructions from the column decoder 44 to select 
the appropriate bit line connected to the memory cell 19 
that is to be programmed, read, or erased. A sense 
amplifier 36 includes electronic circuitry that serves to 
detect the status of memory cell 19 connected to bit line 

30 16 when bit line select transistor is selected by column 
decoder 44, and when access transistor 12 is selected by 
row decoder 50, during a read operation. 

The write, erase, and read operations of an 
EEPROM cell are well known to one of ordinary skill in 

35 the art, and will not be described further herein. 

ATM36: 207 .APL Atmel Proprietary 



-7- 



In this exemplary embodiment of the present 
invention, a security row 65 and a security column 75 
have been added to the standard memory array structure 
described above. In this embodiment , one security row 65 
5 and one security column 75 are shown, however, multiple 
security rows and columns can be implemented in to an 
array, if so desired. Each memory cell 11 in the 
security row 65 consists of a floating gate transistor 17 
and an access transistor 15, arranged similarly as 

10 described above with respect to the floating gate 

transistor 10 and the access transistor 12. The floating 
gate transistor 17 in each group are connected to the 
source of a word select transistor 13. The security row 
word line 62 is connected to a security row decoder 60, 

15 and each memory cell in the security row is connected to 
a corresponding bit line 16, as described above. 

Additionally, the memory array includes a 
security column 75 connected to a security bit line 
column latch 80. The security column includes a lockbit 

20 cell 52 consisting of an access transistor 51 and a 

floating gate transistor 53, connected to the security 
bit line 74 in the same manner as the other memory cells 
in the security row described above. A select transistor 
55 in. the security bit line 74 has a gate terminal 

25 connected to the column decoder 44 of the memory array, a 
drain terminal connected to the lockbit cell 52 (i.e., 
the drain of the access transistor 51) and a source 
terminal connected to a lockbit sense amplifier 70. The 
lockbit sense amplifier 70 may be, for example, similar 

30 in construction to the sense amplifier 36. 

When programmed to lock mode, the memory cell 
11 and lock bit cell 52 will sink current whenever the 
security row 65 is selected. The security row 65 is 
selected when the security row decoder 60 sends a select 

35 signal to the security word line 62. The security row 65 
is selected whenever an external read operation, but not 
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an internal read operation, is requested of the memory 
cell 19, and the word line 20 and the column address 42 
are concurrently selected- Regardless of a conducting or 
non-conducting state of memory cell 19, the sense 
5 amplifier 36 will output a logic "0" because of the 
selected and conducting security row memory cell 11. 
Therefore, a true data content of the memory cell 19 will 
not be available for an external read when the security 
row memory cell 11 is programmed to lock mode. 

10 Furthermore, the security row 65 is selected and the 

column address 42 are selected at other appropriate times 
so that the conducting state of the lockbit cell 52 is 
detected and output as a logic "0" by the lockbit sense 
amplifier 70. A signal at an output 99 is then sampled, 

15 latched, and used to deny external memory access 
requests. 

When programmed to unlock mode, the memory cell 
11 and the lock bit cell 52 will not sink current 
whenever the security row 65 is selected. When an 

20 external read operation is requested of the memory cell 
19 and the word line 20 and the column address 42 are 
selected, the security row 65 will be selected. Since 
the memory cell 11 is non-conducting, the output of 
sense-amplifier 36 will be determined solely by the 

25 conducting or non-conducting state of memory cell 19. 

Therefore, the true data content of the memory cell 19 is 
available for an external read when the security row 
memory cell 11 is programmed to unlock mode. 
Furthermore, when the security row 65 and the column 

30 address 42 are selected at other appropriate times, the 
non-conducting state of the lockbit cell 52 is detected 
and output as a logic "1" by the lockbit sense amplifier 
70 so that the signal at the output 99 can be sampled, 
latched, and used to allow external memory access 

35 requests. 
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The algorithm for the CHIPERASE sequence for 
programming the unlock mode is implemented by a chiperase 
logic circuit 81. The chiperase logic circuit 81 sends 
out an enable signal on output line 83 to the row decoder 
5 50 allowing row selection during the first phase of the 
CHIPERASE operation. At this time, an enable signal on 
output line 82 is not sent out to the security row 
decoder 60, so security row selection is not allowed 
during the first phase of the CHIPERASE operation. This 

10 allows time for the embedded memory elements to be erased 
while the security row elements are not erased. After 
some time of erasing, the chiperase logic circuit 81 
sends out both enable signals on the output lines 82 and 
83, allowing row selection of both embedded memory array 

15 elements and security row elements. This allows for 

continued erasing of the embedded memory elements, and 
for the start of erasing of security row elements. After 
sufficient time in which both the embedded memory 
elements and the security row elements are erased, the 

20 CHIPERASE operation ceases. 

Although the detailed description and drawings 
describes an embedded memory device with security row 
lock protection, one skilled in the art will recognize 
that other embodiments can readily be contemplated 

25 without departing from the intended scope of the device 

described. For example, a skilled artisan could envision 
a plurality of security rows distributed across a memory 
array. Therefore, the scope of the present invention 
shall only be limited by the appended claims. 
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